Privacy Policy

Effective Date: July 17, 2026

Otake Inc. ("we," "our," "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and disclose information when you visit our website, use our services, or interact with our platform. By accessing or using our services, you agree to the collection and use of information in accordance with this policy.

Otake Inc. is located at:

Address:

1111B S Governors Ave STE 20389

Dover, DE 19904

Email: support@otake.io

Please read this policy carefully to understand our views and practices regarding your personal data and how we will treat it.

We collect various types of information in order to provide and improve our services to you. The types of information we collect include:

Personal Information:

• Name

• Email address

• Phone number

• Account credentials (username, password)

• Payment information (if applicable)

Usage Data:

• Your IP address

• Browser type and version

• Pages visited on our website

• Referring URLs

• Date and time of your visit

• Time spent on each page

Cookies and Tracking Technologies:

We use cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device to help remember your preferences, provide personalized content, and analyze traffic to our website.

You can manage your cookie preferences by adjusting the settings in your browser. However, please note that blocking certain cookies may impact your experience on our website.

We use Google authentication (OAuth) to enable users to sign in and register for our service more easily.

To keep your Google Calendar in sync with your bookings, Otake stores a long-lived refresh token. This token is stored securely and used only to create and manage calendar events on your behalf. You can revoke this access at any time from your Google Account settings.

With your explicit consent, Otake may access the following information from your Google account:

For Google Sign-In:

• Name (first and last)

• Profile picture

• Email address

For Google Calendar integration (when you connect your calendar):

• Calendar events - to sync your bookings automatically

• Ability to create and manage events on your behalf

Sign-In data is accessed during the registration and login process. Calendar data is accessed only when you explicitly connect your Google Calendar in the Integrations section.

We use Google authentication (OAuth) to enable users to sign in and register for our service more easily.

The Google account data is used to:

• create and manage your Otake user account;

• personalize your experience on our platform;

• communicate with you regarding your account and service notifications.

Otake will not share, sell, or use this Google account information for any purpose other than what is described here or as otherwise disclosed in this Privacy Policy.

We retain Google account information only as long as your account remains active on Otake or as needed to provide you the service.

If you delete your Otake account or request deletion of your personal data, Otake will remove your Google account information from our systems within 30 days, unless a longer retention period is required by law.

You may also request deletion of your data at any time by contacting support@otake.io.

Deleting an Otake account also disconnects connected third-party integrations, including Zoom, and initiates deletion of related integration data as described in this Privacy Policy.

By using Google sign-in, you acknowledge and agree to this access and the use of your Google account information as described above.

Otake's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

For more information, visit: https://developers.google.com/terms/api-services-user-data-policy

Otake allows users to connect a Zoom account through Zoom OAuth in order to create and manage Zoom meetings for bookings. Connecting Zoom is optional. Otake accesses Zoom data only after the user explicitly authorizes the integration.

Information Otake Receives and Stores from Zoom:

- Zoom user ID and the email address associated with the Zoom account.

- OAuth access and refresh tokens, the permissions granted to Otake, and token expiry information.

- For meetings created through Otake: the Zoom meeting ID, meeting UUID, join URL, synchronization status, and technical error information where applicable.

Otake uses this information only to identify the connected account; create, update, and delete Zoom meetings for relevant bookings; show the meeting link in the booking; and diagnose integration errors. Otake does not retrieve or access Zoom meeting audio, video, chat messages, recordings, transcripts, participant activity, or other meeting content.

When Otake creates or updates a meeting, it sends Zoom the booking title, scheduled start time, duration, time zone, and an agenda based on the booking comment or event description, where provided.

Zoom OAuth Tokens and Security:

Otake stores Zoom OAuth tokens only in encrypted form. Tokens are encrypted using AES-256-GCM and may be decrypted only by authorized backend systems when needed to perform an action on the connected user's behalf. Tokens are not exposed to the browser, client-side storage, or public repositories.

Sharing of Zoom Information:

Otake does not sell or rent information received from Zoom, and does not use it for advertising, profiling, or unrelated marketing. Zoom information may be processed only as necessary by service providers that operate Otake, such as hosting, database, security, monitoring, and customer-support providers, subject to confidentiality and data-protection obligations. Otake may also disclose information when required by law or a valid legal request.

Retention and Deletion of Zoom Information:

When a user disconnects Zoom, Otake immediately deletes the locally stored OAuth access token, refresh token, token expiry information, and granted permissions, and stops accessing Zoom on the user's behalf. The remaining Zoom integration profile information and Zoom meeting metadata are deleted within 30 days after disconnection.

When a user deletes their Otake account, Otake immediately deletes the stored Zoom integration profile information, OAuth credentials, and Zoom meeting metadata associated with that account. Deleting an Otake account or disconnecting Zoom does not itself delete meetings already created in the user's Zoom account; users can manage those meetings directly in Zoom.

Users may request deletion of Zoom-related information by contacting support@otake.io.

We use the information we collect for the following purposes:

• To provide, operate, and maintain our services

• To improve, personalize, and optimize your experience on our platform

• To process transactions, handle payments, and provide customer support

• To communicate with you about updates, offers, and relevant information

• To analyze and understand usage patterns to improve our website and services

• To comply with legal obligations or resolve disputes

We do not sell or rent your personal data to third parties. However, we may share your information in the following circumstances:

Service Providers:

• We may share your information with third-party service providers who help us operate our platform and services, such as payment processors, hosting providers, and customer support services.

Legal Compliance:

• We may disclose your personal information when required by law or if we believe that such action is necessary to:

• Comply with a legal obligation

• Protect and defend our rights or property

• Prevent fraud or illegal activities

• Protect the personal safety of users

Business Transfers:

• In the event of a merger, acquisition, or sale of assets, your personal information may be transferred as part of the transaction.

We take the security of your personal information seriously and employ industry-standard security measures to protect it from unauthorized access, use, or disclosure. However, please note that no method of electronic storage or transmission over the internet is 100% secure, and we cannot guarantee the absolute security of your data.

OAuth tokens and credentials used for third-party integrations are stored with restricted backend access. Zoom OAuth tokens are encrypted at rest using AES-256-GCM. Otake applies reasonable administrative, technical, and organizational safeguards designed to protect these credentials and related user information from unauthorized access, disclosure, alteration, or destruction.

Depending on your location and applicable law, you may have the right to request confirmation of whether Otake processes your personal information; access to the information Otake holds about you; correction of inaccurate or incomplete information; deletion of your personal information; restriction of or objection to certain processing; a portable copy of information you provided to Otake; withdrawal of consent where processing is based on consent; and to lodge a complaint with an applicable data protection authority.

You may manage certain information directly through your Otake account settings. You may opt out of marketing communications by using the "unsubscribe" link in a marketing email.

You may disconnect third-party integrations, including Zoom, through the Integrations section of your Otake account. You may also revoke Otake's Zoom access through the Zoom App Marketplace by opening Manage, selecting Added Apps, finding Otake Zoom Integration, and selecting Remove.

To exercise a privacy right or request access, correction, deletion, restriction, objection, or portability of your information, contact support@otake.io. Please include sufficient information to identify your account and describe your request. Otake may ask for additional information to verify your identity before completing the request. Otake will respond within the period required by applicable law. Exercising your privacy rights will not result in discriminatory treatment.

Our website may contain links to third-party websites, such as social media platforms (Instagram, Facebook, YouTube, etc.) or other services not operated by us. We are not responsible for the privacy practices of these third-party sites. We encourage you to read the privacy policies of those websites before providing any personal information.

Our services are not intended for children under the age of 13. We do not knowingly collect personal information from children under the age of 13. If we learn that we have collected personal data from a child under 13 without verification of parental consent, we will delete that information as soon as possible.

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and the "Effective Date" at the top of the policy will be updated accordingly. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information.

If you have any questions or concerns about this Privacy Policy, please contact us at:

Email: support@otake.io

Address: 1111B S Governors Ave STE 20389 Dover, DE 19904

By using our services, you agree to the collection and use of information in accordance with this Privacy Policy.